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(57) Abstract: Provided is an 
apparatus (100) and method for 
effecting secure transactions in a 
contact less manner using biometric 
identity validation. The apparatus 
(100) may include, for example, 
a biometric sensor (102) that 
i s operable to detect biometric 
information associated with a user 
of the apparatus. A processor (106) 
that is accessible to the biometric 
sensor (102) may be used to process 
the biometric information to verify 
the identity of the user. One or more 
antennae (104) may also form part 
of the apparatus and may perform 
multiple functions. For example, 
the antennae (104) may provide 
coniaciless communication with an 
external device and may also provide 
receive power (1 14) from an external 
power source to power the device 
(100). 
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APPARATUS AND METHOD FOR TRANSACTIONS SECURITY USING BIOMETRIC 
IDENTITY VALIDATION AND CONTACTLESS SMARTCARD 

5 

CROSS-REFERENCE 

This application claims priority from "U.S. Provisional Patent Application Serial No. 
60/368,363, filed on March 28, 2002. 

BACKGROUND 

10 The present disclosure relates generally to authentication and, more specifically, to 
an apparatus and method for effecting secure physical and commercial transactions 
in a contactless manner using biometric identity validation. 

Identity validation, transaction approval, and similar issues are becoming 
increasingly important. The widespread use of credit cards for remote transactions 

15 presents the need to ensure that the person making a purchase is authorized to do so. 
In addition, security concerns increase the need for convenient and reliable identity 
validation for access to secure areas of businesses, government offices, and similar 
areas. 

Although attempts have been made to solve meet these needs, a 
20 satisfactory solution has not yet been achieved. Many proposed solutions are 

unwieldy, fail to provide identity validation, require connections to external devices, 

or have similar issues. 

Accordingly, what is needed is an apparatus and method for effecting 

secure physical and commercial transactions in a contactless manner using biometric 
25 identity validation. It is desirable that the apparatus be relatively self-contained and 

that it interact with other devices without requiring physical contact. It is also 

desirable that the apparatus be easy to transport and use, and that it accommodate a 

variety of different applications. 
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SUMMARY 

Provided is an apparatus and method for effecting secure transactions in a 
contactless manner. In one embodiment, the apparatus comprises. 

BRIEF DESCRIPTION OF THE DRAWINGS 

5 Fig. 1 is a diagram illustrating one embodiment of an exemplary device for 

effecting secure physical and commercial transactions in a contactless manner using 
biometrics identity validation. 

Fig. 2 illustrated an exemplary environment in which the device of Fig. 1 
may operate. 

10 Fie. 3 is a flow chart of an exemplary method for using the device of Fig. 1 

in the environment of Fig. 2. 

Fig. 4 is a diagram illustrating another embodiment of an exemplary 
device for effecting secure physical and commercial transactions in a contactless 
manner using biometrics identity validation. 
15 Fig. 5 is an illustration of one embodiment of a biometric sensor that may 

be used in the device of Fig. 4. 

Fig. 6a illustrates a plurality of layers that form one embodiment of the 
biometric sensor of Fig. 5. 

Fig. 6b illustrates a plurality of layers that form a portion of one 
20 embodiment of the device of Fig. 4. 

Fig. 7 is a diagram of an exemplary power circuit that may be used in the 
device of Fig. 4. 

Fig. 8 is a flow chart of an exemplary method for storing a template 
fingerprint analog in the device of Fig. 4. 
25 Fig. 9 is a flow chart of an exemplary method for using the device of Fig. 4. 

Fig. 10 is a flow chart of an exemplary method for using the device of Fig. 1 
in an air transportation environment. 

Fig. 11 is a flow chart of an exemplary method for using the device of Fig. 1 
in a healthcare environment. 
30 Fig. 12 is a flow chart of an exemplary method for storing a biometric 

template analog in the device of Fig. 1. 

Fig. 13 is a flow chart of an exemplary method for using the device of Fig. 1 
in a financial transaction. 

2 
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DETAILED DESCRIPTION 

The present disclosure relates generally to authentication and, more 
specifically, to an apparatus and method for effecting secure physical and commercial 
transactions in a contactless manner using biometric identity validation. It is 
5 understood, however, that the following disclosure provides many different 

embodiments or examples. Specific examples of components and arrangements are 
described below to simplify the present disclosure. These are, of course, merely 
examples and are not intended to be limiting. In addition, the present disclosure may 
repeat reference numerals and/or letters in the various examples. This repetition is 

10 for the purpose of simplicity and clarity and does not in itself dictate a relationship 
between the various embodiments and/or configurations discussed. 

Referring to Fig. 1, one embodiment of an intelligent device 100 is 
depicted. As will be described later in greater detail, the device 100 is comprised of 
multiple components, including a biometric sensor 102, a radio frequency ("RF") 

15 antenna 104, a controller 106, control buttons 108, a dynamic information display 
110, a magnetic information media component 112, and a RF power conversion and 
power management unit 114. A plurality of inter-component communication paths 
116 provide connections between various components of the device 100. 

The RF antenna 104 may perform multiple functions. For example, it may 

20 capture RF energy from a RF field emanated by a RF power source and may also 

support two-way communication with an associated reader/writer device (not shown). 
The antenna 104 may be a single antenna capable of performing both functions or 
may comprise multiple antennae, with one antenna for capturing RF energy from the 
RF field and another antenna for supporting the two-way communication with the 

25 reader/writer device. The communications envisioned include, for example, 

authenticated identification of a person operating the device 100, various purchases 
and financial transactions, air ticket booking and airport security check points, and 
other interactions between the device 100 and the reader/writer device. These 
communications may be secured using mechanisms such as data encryption. It is 

30 understood that other communications components, such as audio or optical 

components, may replace or supplement the antenna 104. In addition, the antenna 
104 may be operable to function with wavelengths other than RF. 

The biometric sensor 102 is used for sensing a physical attribute of a user 
of the device 100 and generating an analog of this physical attribute. The analog may 
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then be made available to the controller 106. More specifically, the biometric sensor 
102 is designed to sense some physical attribute of a person and extract a distinctive 
analog of that person. To be useful for establishing positive identification, the analog 
may need to be individualized sufficiently so as to be unique to every person. In 
5 addition, a trusted copy - a template - of the analog should be captured. Analogs 
later sensed by the biometric sensor 102 may then be compared against the template 
analog. Various physical attributes may be used for identification purposes, such as 
fingerprints, voice prints, and retinal prints. 

The controller 106 interacts with the biometric sensor 102 and other 

10 components of the device 100 to perform various functions. For example, the 

controller 106 may capture the analog of the physical attribute for long term storage 
as a trusted template analog of an authorized user, as well as for immediate 
comparison to a stored trusted template analog during an authentication procedure. 
The controller 106 may also determine whether the comparison indicates a match 

15 between the template analog and the analog captured by the biometric sensor 102. In 
addition, the controller 106 may control the dynamic information display 110, 
respond to input from the control buttons 110, and control the magnetic information 
media component 112. Furthermore, the controller 106 may support two-way 
communications with an associated reader/writer device (Fig. 2) via the RF antenna 

20 104. The controller may be a single controDer/ processor or may comprise multiple 
controllers/processors . 

The dynamic information display 110 may be used to display information 
to a user, as well as to enable a process with which the user may interact using the 
control buttons 110. The magnetic information media component 112 may be 

25 manipulated so that it provides information via a magnetic field. The RF power 
control unit 114 may convert RF radio energy to electrical energy, and may control 
storage and distribution of this electrical energy to the other components in the 
device 100. It is understood that the device 100 may also have a battery and/or other 
power means to use as a backup or alternative power source for the RF power control 

30 unit 114. 

Referring now to Fig. 2, the device 100 is illustrated in an exemplary 
environment 200 that enables contactless interaction with a reader/writer device 202. 
To achieve this contactless interaction, the device 100 is shown with the antenna 104, 
as described in reference to Fig. 1. The device 202 uses one or more antennae 204 to 

4 
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communicate with the device 100, as well as emanate a RF power field 206 with the 
purpose of supplying power to compatible devices, such as the device 100. In 
operation, a two-way communication link 208 may be established between the 
reader/writer device 202 and the device 100. 
5 It is understood that many different reader/writer configurations may be 

used. For example, the reader/writer device 202 may be in communication with 
other devices or with a network. Furthermore, the reader/writer device 202 may 
include the RF power source, or they may be separate devices. For purposes of 
clarity, the reader/writer device 202 of the present example includes the RF power 
10 source. 

Referring now to Fig. 3 and with continued reference to Figs. 1 and 2, the 
device 100 may be operated in the environment 200 using a method 300 as follows. 
In step 302, the device 100 is placed into the RF field 206 emanated by the 
reader/writer device 202. When placed into the RF field, the device 100 captures 

15 power from the RF field 206, which powers up the device 100's electronics. In step 
304, the biometric sensor 102 is actuated by a user. The method of actuation may 
depend on the type of biometric sensor (e.g., a fingerprint for a fingerprint sensor, 
speaking for a voice sensor, etc.). In step 306, an authentication process is performed 
by the device 100. As in the previous step, the authentication process may depend on 

20 the type of biometric sensor. For example, the detected fingerprint or voice may be 
compared to a template in the memory of the device 100. In step 308, a 
determination is made as to whether the user is authenticated. If the authentication 
process fails to validate the user, the method 300 may return to step 304. If the user 
is validated by the authentication process, the method continues to step 310, where 

25 the device 100 continues the desired transaction with the reader/writer device 202. 
Once this occurs, the device 100 may be removed from the RF field 206 in step 312, 
which powers down the device 100. 

Referring now to Fig. 4, in another embodiment, a device 400 illustrates an 
implementation of the present disclosure using a form factor similar to that of a 

30 credit card. The credit card form factor of the device 400 includes a plurality of 
components, such as a fingerprint sensor 402, a RF antenna 404, a first controDer 
406, a second controller 408, function selector buttons 410, an electro-luminescent 
display 412, and a magnetic strip 414. In the present example, the first controller 
406 is an application specific integrated circuit ("ASIC") chip and the second 
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controller 408 is a smart card chip, although it is understood that the functionality of 
both controllers may be provided by a single controller. 

The ASIC 406 is a custom integrated circuit chip developed for use in the 
device 400. The ASIC 406 includes Random Access Memory ("RAM") which may be 

5 used for temporarily storing a current fingerprint analog detected by the fingerprint 
sensor 402 and for temporarily storing intermediate results of processing calculations 
(e.g., fingerprint comparisons, etc.). The ASIC 406 may also include non-volatile 
memory (e.g., Flash memory or EEPROM) to store and retrieve one or more 
fingerprint template analogs that are used for comparison against the current 

10 fingerprint analog. 

Circuitry contained within the ASIC 406 provides an interface between the 
ASIC 406 and the fingerprint sensor 402. In the present example, the ASIC 406 
contains a microprocessor core with dedicated program and temporary memory, 
enabling the ASIC 406 to use an array of processing elements for executing 

15 instructions stored within the ASIC 406 in parallel. The instructions enable the 
ASIC 406 to perform a comparison between the current fingerprint analog and a 
template fingerprint analog. Other instructions included within the ASIC 406 may 
provide support for an authorization signal to be sent to the smart card chip 408 after 
an authentication process has been completed. In addition, the ASIC 406 may be 

20 used to drive the electro-luminescent display 412, read the function control buttons 
410, and drive the programmable magnetic strip 414. 

The smart card chip 408 may support various application programs. These 
applications may include, for example, storage/retrieval of personal demographics 
information, storage/retrieval of a digitized picture of the cardholder, an "electronic 

25 purse" functionality, financial transactions, purchases, etc. In addition, the smart 
card chip 408 may support two-way communication data transfers and may perform 
various encryption functions to support secure communications. In the present 
example, the communications and encryption are based on known standards, but 
proprietary protocols may be used if desired. It is envisioned that the smart card 

30 chip 408 may support standard smart card interactions such as identification 
validation, credit card transactions, and others. 

The fingerprint sensor 402 is designed to detect fingerprint information 
and provide the detected information to other components of the device 400. In the 
present example, the fingerprint sensor 402 comprises a polymer thick film ("PTF") 
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construction, which provides the fingerprint sensor 402 with the flexibility and 
ruggedness needed for implementation on the device 400. As is described in greater 
detail below in Figs. 5 and 6a, the fingerprint sensor 402 comprises a matrix of points 
that are operable to detect high and low points corresponding to ridges and valleys of 

5 a fingerprint. The points are captured and used by the ASIC 406 to determine 

whether the detected fingerprint analog matches a fingerprint template analog that 
is stored in memory. 

Referring now to Fig. 5, in one embodiment, the PTF sensor 402 comprises 
a rectangular arrangement of row electrodes 502 and column electrodes 504. It is 

10 noted that more or fewer columns and rows may be included in the PTF sensor 402, 
depending on such factors as the desired resolution of the PTF sensor 402 (e.g., the 
number of data points desired). Electrical connections from the row and column 
electrodes 502, 504 may route to the ASIC 306. 

In operation, a fingerprint analog detected by the PTF sensor 402 may be 

15 captured by the ASIC 406 as a sequence of numerical values. For purposes of 
illustration, the row and column electrodes 502, 504 may be viewed as a two 
dimensional matrix of pixels, with numerical values representing intersections 
between the row and column electrodes. The numerical values may be associated 
with gray scale values, and an analog representing a fingerprint may be generated 

20 from the matrix of gray scale values. It is understood that there is no need to 

transform the captured analog into a visible image since the matching between the 
stored template fingerprint analog and the candidate fingerprint analog need not rely 
on a visual process. However, it is convenient to conceptualize the numerical values 
as an image for purposes of evaluating the sensor resolution used to support 

25 fingerprint authentication. It is generally accepted that a graphical resolution of 
from 100 dots per inch ("dpi") to 500 dpi is sufficient for fingerprint authentication. 
In the present example, the PTF sensor 402 comprises 200 row electrodes and 200 
column electrodes arranged in a Vfc" by W* matrix, which corresponds to a graphical 
resolution of 400 dpi. 

30 Referring now to Fig. 6a. a schematic depiction of functional layers of one 

embodiment of the PTF sensor 402 of Fig. 4 is shown. The PTF sensor 402 is 
comprised of functional layers including an annularly shaped topside electrode 6025 
an insulator with backside reflector 604; an electro-luminescent layer 606; insulator 
layers 608, 612, 616, and 620; row electrodes 610; column electrodes 614; an electro* 
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resistive layer 618; an electrode 622; and a substrate layer 624. The substrate layer 
624 may be a portion of the substrate for the entire device 400. 

In operation, when a user of the device 400 places a finger or thumb 
(henceforth only finger will be specified, although it is understood that both fingers 
5 and thumb are intended) on the surface of the PTF sensor 402, the finger contacts the 
topside electrode 602 and becomes electrically grounded to the topside electrode 602. 
When a voltage is applied to row electrodes 610, an electric field is generated between 
the row electrodes 610 and the topside electrode 602. The strength of the generated 
field varies depending on how close the finger is to the topside electrode 602. For 

10 example, fingerprint ridges may be relatively close to the topside electrode 602 of the 
PTF sensor 402, varying the generated field in a detectable -manner. Fingerprint 
valleys may be more distant from the PTF sensor 402 than the fingerprint ridges, 
which may vary the generated field in a detectable manner that may be differentiated 
from the variations caused by the fingerprint ridges. 

15 The electro-luminescent layer 606 may emit more or less light as the 

electric field that impinges upon it varies, thereby generating an analog of the 
fingerprint incident upon the PTF sensor 402. The reflector component of the 
insulator with backside reflector layer 604 serves to reflect the omni directional light 
emitted by the electro-luminescent layer 606 and thus intensify the fingerprint 

20 analog. The PTF sensor 402 may be operated by applying a bias voltage to only one 
row electrode at a time, successively biasing and unbiasing one row after another. 
This has the effect of causing the electro-luminescent layer 606 to generate an analog 
of an elongated thin strip of the fingerprint. By sensing each of these analogs and 
combining them upon completion of row sequencing, a complete analog may be 

25 collected. 

It is a property of the electro-resistive layer 618 that when it is placed in 
an electrical field its resistance varies with the intensity of light incident upon it. 
The light emitted by the electro-luminescent layer 306, which is an analog of the 
fingerprint, passes through the intervening layers 608, 610, 612, 614, and 616 to 
30 impinge upon the electro-resistive layer 618. The electro-resistive layer 618 is placed 
in an electric field by placing a DC voltage bias on the electrode 622 relative to the 
column electrodes 614, causing the electro-resistive layer to exhibit varying 
resistance depending upon the intensity of light incident upon it and thereby forming 
an analog of the fingeiprint. A voltage is applied to the column electrodes 614, and 
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the impedance between the column electrodes 614 and the electrode 622 can be 
measured. This measured impedance is directly related to the varying resistance of 
the electro-resistive layer 618 and hence an analog of the fingerprint. So by 
activating each row electrode in succession, as described above, an analog of the 
5 fingerprint can be captured and stored. 

The ASIC 306 may control the sequential activation of the row electrodes 
610, the reading back of the varying resistance from the column electrodes 614, and 
other functions of the PTF sensor 402. It is understood that other approaches may be 
used, such as reading one column at a time for each row or reading multiple 

10 row/columns at once. Furthermore, while the preceding description focuses on the 
use of the PTF sensor 402 as a fingerprint sensor, the principle of operation of the 
PTF sensor 402 is general and not limited to capturing fingerprint analogs. 

Referring now to Fig. 6b, one embodiment of a portion of the device 400 
illustrates the biometric sensor 402, display 412, and RF antenna 404 formed on the 

15 substrate 624. The biometric sensor comprises layers 602-622 as described with 
respect to Fig. 6a, the display 412 comprises layer 626-636, and the RF antenna 
comprises layers 638-648. As is illustrated in Fig. 6b, each of the components 402, 
412, 404 share a number of layers (e.g., 622, 636, and 648). This sharing simplifies 
the design of the device 400 and may also reduce manufacturing costs. 

20 Referring again to Fig. 4, the RF antenna 404, which may comprise one or 

more antennae, may capture RF energy from a RF field emanated by a RF power 
source and may also support two-way communication with an associated 
reader/writer device (not shown). The RF energy which is captured is converted to 
electrical energy and accumulated within the device 400. In some embodiments of 

25 the device 400, a rechargeable battery may power the electronic components when no 
RF energy field is present. Such a battery may be charged via an RF energy field or 
alternative charging means. 

The electro-luminescent display 412 provides the capability to display 
information to a user of the device 400. For example, the information may include a 

30 credit card number to support "card not present" transactions, a residual balance of 
an "electronic purse," air travel flight and seat assignment information, and similar 
information. Furthermore, interaction with the display 412 may be accomplished via 
the function control buttons 410. For example, the buttons 410 may be used to select 
a credit card number (if the device 400 stores multiple numbers) viewed via the 
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display 412 or to enter a personal identification number. The pliability of the electro- 
luminescent display 412 aids its use in the card-like form factor of the device 400. 
While two function control buttons 410 are illustrated, it is understood that other 
numbers and configurations of function control buttons may be used. 

5 A dynamic magnetic strip 414 is provided to provide compatibility with 

existing reader devices. The dynamic magnetic strip 414 may be used in either fixed 
or dynamic mode. In dynamic mode, magnetically stored information - such as a 
credit card number - may be changed under control of the ASIC 406. 

Referring now to Fig. 7, an illustrative power circuit 700, such as may be 

10 used in the device 400 of Fig. 4, is depicted. When appropriate RF energy is incident 
upon the device 400, the RF energy couples into a RF antenna 702. From the 
antenna 702, the energy enters a RF-to-DC power converter 704, which includes a 
full-wave rectifier to convert the AC RF field into a DC-like circuit. Capacitance may 
be provided to buffer the AC peak variations into a DC-like source. The intermediate 

15 power generated by this process may be used for a variety of purposes, such as 

charging a battery 706 if the battery 706 is below its full capacity and feeding power 
to the device 400. The battery 706 may be charged through a battery management 
unit 708. A smart power multiplexer 710 may be used to determine whether to draw 
power from the battery management unit 708, directly from the RF-to-DC power 

20 converter 704, or from both. 

A voltage regulator 712 creates a stable DC voltage level to power the 
device 400. When no RF energy is coupled into the RF antenna 702, the RF-to-DC 
converter 704 may not function and power may be drawn from the battery 
management unit 708 by the smart power multiplexer 710. As before, the voltage 

25 regulator 412 creates a stable DC voltage level to power the device 400. It is 

understood that, in other embodiments, the power circuit 700 may not employ a 
battery or rechargeable battery, and may rely solely on power captured from the RF 
field. 

Referring now to Fig. 8, an exemplary template storage method 800 
30 illustrates one embodiment for capturing and storing a template of a fingerprint 

analog for the device 400 of Fig. 4. In step 802, a user places the device 400 in a RF 
field emanated by a reader/writer device. As described previously, the device 400 
captures power from the RF field. In step 804, the user places his thumb or finger on 
the fingerprint sensor 402 and, in step 806, the device 400 determines whether a 

10 
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template fingerprint analog is already stored. If it is determined that no template 
fingerprint analog is stored, the method 800 continues to step 808. In step 80S, the 
user's incident fingerprint is sensed by the fingerprint sensor 402, a fingerprint 
analog is generated by the fingerprint sensor 402, and the ASIC 406 stores the 
5 fingerprint analog as a template fingerprint analog. If a fingerprint template analog 
is already stored, the method 800 continues to step 810, where the device 400 is 
removed from the RF field. It is understood that other events may occur before step 
810 if a fingerprint template analog is already stored, such are illustrated in Fig. 9. 

Although not shown in the present example, multiple template fingerprint 

10 analogs may be stored in the device 400. The template fingerprint analogs may 

represent multiple fingerprints of a single person or may represent the fingerprints of 
different people. This may be accomplished, for example, by implementing a method 
for allowing the device 400 ! s owner to securely control initialization of multiple 
template fingerprint analogs and to selectively enable which template fingerprint 

15 analog will be used to authenticate identity and authorize transactions. 

Alternatively, if the device 400 is to be used in environments requiring higher 
security, the user of the device 400 may need to appear in person and validate his or 
her identify using traditional methods (e.g., a driver's license, birth certificate, etc.). 
After validation, the user's template fingerprint analog may be placed into the device 

20 300 as described above or through other means (e.g., a scanner that transfers the 
template fingerprint analog into the device 300). 

Referring now to Fig. 9, in another embodiment, a method 900 illustrates 
one method of operation for the device 400. In step 902, as has been described 
previously, the device 400 is placed into an RF field emanated by a reader/writer 

25 device. When placed into the RF field, the device 400 captures power, energizing its 
electronics. In step 904, a user places one of his fingers onto the fingerprint sensor 
402. As described above, the fingerprint sensor 402 captures an analog of the 
fingerprint and passes the analog to the ASIC 406. 

In step 906, an authentication process is performed by comparing the 

30 captured fingerprint analog to one or more template fingerprint analogs stored in 
memory. In step 908, a determination is made as to whether the user is 
authenticated (e.g., whether the captured fingerprint analog matches a stored 
template fingerprint analog). If the authentication process fails to validate the user, 
the method 900 may return to step 904 as shown or may end, requiring the user to 
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remove the device 400 from the RF field and begin again with step 902. If the user is 
validated by the authentication process, the method continues to step 910, where the 
device 400 conducts a communications handshake process with the reader/writer 
device via a contactless two-way communication link. In step 912, the device 400 
continues the desired transaction with the reader/writer device. Once this occurs, the 
device 400 may be removed from the RF field, which powers down the device 400. 

Referring now to Fig. 10, in another embodiment, a method 1000 
illustrates using the present disclosure in an air transportation environment. A 
traveler desiring to make a remote reservation presents a device (such as the device 
100 of Fig. 1) to a reader/writer device. In the present example, the reader/writer 
device is attached to a personal computer ("PC") via a wired or wireless connection. 
The PC may enable the traveler to access an application, such as a web based flight 
reservation application. 

In step 1002, a determination is made as to whether the traveler has 
selected a remote reservation and ticketing process. If the traveler has selected such 
a process, the method 1000 continues to step 1004, where the device 100 is used in 
conjunction with PC and the reader/writer to verify the traveler's identification and 
approve the transaction and associated payments. In addition, flight information 
may be transferred from the reader/writer device into the device 100. 

The method 1000 then continues to step 1006, where a determination is 
made as to whether the traveler has selected to remotely check-in baggage. If the 
traveler has not selected to remotely check-in baggage, the method 1000 continues to 
step 1012. If the traveler has selected to remotely check-in baggage, the method 1000 
continues to step 1008, where the device 100 is used in conjunction with PC and the 
reader/writer to verify the traveler's identification. In addition, flight and ticket 
information may be read from the device 100 to farther automate the baggage check- 
in process. After the traveler has entered any desired information (e.g., number of 
bags, etc.), baggage reference information may be transferred into the traveler's 
device 100. 

Returning to step 1002, if it is determined that the traveler has not 
selected a remote reservation and ticketing process, the method 1000 continues to 
step 1010, where the traveler may use the device 100 with a reader/writer device at a 
counter or self-service kiosk in a manner similar to the process of the remote check-in 
of step 1004. More specifically, the traveler may use the device 100 to verify the 
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traveler's identification and approve a purchase transaction, as well as any 
associated payments. In addition, flight information may be transferred from the 
reader/writer device into the device 100. 

Continuing to step 1012, the traveler may use the device 100 with the 
5 reader/writer device at the counter or self-service kiosk in a manner similar to the 
process of the remote baggage check-in of step 1008. More specifically, the traveler 
may use the device 100 to verify the traveler's identification, provide flight and ticket 
information, and store baggage reference information that is transferred from the 
reader/writer device. 

10 After the ticketing and baggage check-in, the method 1000 continues to 

steps 1014, 1016, and 1018, where the traveler may present the device 100 to other 
reader/writer devices for identification and ticket authentication. For example, this 
may occur at security checkpoints, gates, and7or at boarding. It is understood that 
some of the reader/writer devices may be in communication with airline and/or 

15 government databases. 

Referring now to Fig. 11, in another embodiment, a method 1100 
illustrates using the present disclosure in a health care environment. In step 1102, a 
determination is made as to whether a patient desires to perform a pre check -in 
process before arriving at a healthcare facility. If it is determined that the patient 

20 does desire to perform a pre check-in process, the method 1100 continues to step 
1104, where the patient may present a device (such as the device 100 of Fig. l) to a 
reader/writer device. In the present example, the reader/writer device is attached to 
a personal computer ("PC") via a wired or wireless connection. The PC may enable 
the patient to access an application, such as a web based healthcare application. 

25 Upon presentation of the device in step 1104, the patient may be identified, payment 
and care instructions may be approved, and medical information (e.g., records, 
prescriptions, etc.) may be activated. The device 100 may also be used to provide the 
patient with medical alerts. 

In step 1106, if the patient has not performed the pre check-in process of 

30 step 1104, the patient may use the device 100 to perform similar functions at the 

healthcare facility. The method then continues to step 1108, where the device may be 
used to access provider services. For example, the device 100 may be used to interact 
with a reader/writer device at a desk or workstation in the healthcare facility (e.g., an 
examination room). This interaction may authenticate the patient's identification, 
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provide access to pertinent medical records, verify that the records are updated, and 
store one or more prescriptions. 

Continuing to step 1110, the patient may present the device 100 to a 
reader/writer device at a pharmacy. The device 100 may be used to authenticate the 
5 patient's identification for a prescription and provide the prescription to the 
pharmacy. Furthermore, the device 100 may provide insurance/payment 
information and enable the patient to approve the transaction. 

Referring now to Figs. 12 and 13, in another embodiment, methods 1200 
and 1300 illustrate using the present disclosure in a financial transaction 
10 environment. The financial transaction environment includes making retail 

purchases in either a physical store or on-line (e.g., over the Internet). The present 
disclosure may be implemented in the financial transaction environment by using a 
device, such as the device 100 of Fig. 1, to identify buyers, verify the identity of the 
buyer rapidly in a localized venue, associate the buyer's identity with a credit or debit 
15 account, and/or assure the availability and legitimacy of funds in these accounts for 
payment transactions. 

Payments for retail purchases are generally accomplished in one of three 
ways: with cash; with a check; or with a credit or debit card. In a cash transaction, 
there is generally no need for validating the identification of the buyer. In a 
20 transaction where a check is used, there generally is a need for identification of the 
buyer. This identification may occur by way of the buyer's presentation of a driver's 
license or alternate, approved identification card, presentation of a credit card to 
indicate credit- worthiness, or by a telecommunication connection to a check security 
processing service to assure funds availability for, and legitimacy of, the check 
25 presented for payment. 

In a transaction where a credit or debit card is used, there are generally 
various procedural mechanisms in place to assure buyer identification and legitimate 
ownership of the card presented for the payment transaction. For example, the 
payment may require the entry of a numeric PIN (Personal Identification Number) 
30 security code by the buyer and assumed owner of the card. Alternatively, sales 

personnel may compare the buyers signature on the back of the card presented for 
payment versus the requested signature on the purchase receipt provided for the 
goods or services purchased. In some cases, cards have a photograph of the card 
owner on them, and sales personnel may make cursory comparisons of this 
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photograph with the buyer to establish identification. However, both photographic 
comparison and PIN-based card authorization have weaknesses for assuring 
identification, and both have potential risk for fraudulent processing. Photographs 
can be falsified and PIN numbers can be stolen. In the case of on-line purchases, 
5 buyers are not present to provide authorizing signatures, photographic comparisons 
cannot be made with existing processing infrastructure, and PIN-based transactions 
can be compromised with identity theft. 

Referring specifically to Fig. 12, before the device 100 is usable in financial 
transactions, it should be initialized by the buyer/owner with the registration of a 

10 selected fingerprint pattern into secured memory of the device 100. To register a 
selected fingerprint, the device owner holds the device 100 in the RF field generated 
by a point of sale (POS) device, which may be a kiosk, personal computer, cash 
register, or similar device. The RF energy from the POS device provides for the 
power of the device 100 and display activation in step 1202. In step 1204, a 

15 determination is made as to whether the device 100 has been previously used. For 
example, the device 100 may determine if a fingerprint template analog is already 
stored in memory. If the device 100 has been previously used, the method 1200 ends. 
If the device has not been previously used, the device 100 continues to step 1206, 
where the owner is prompted to actuate the biometric sensor. For example, this may 

20 entail the owner briefly touching the biometric sensor 102 on the device 100 with a 
selected finger or thumb. The fingerprint information is read from the biometric 
sensor 102 and stored in the device 100 in steps 1208, 1210 while the owner 
maintains contact with the biometric sensor 102. The owner may maintain contact 
with the biometric sensor 102 until, in step 1212, an acknowledgement is displayed 

25 on the display 110 that the fingerprint pattern has been successfully registered in the 
device 100 as an encrypted template. 

Referring specifically to Fig. 13, to authorize a payment transaction where 
invoice information is displayed by the POS device, the user of the device 100 holds 
the device 100 within an RF field generated by an RF reader connected to the POS 

30 device in step 1302. For example, the user may hold the device 110 at an 

approximate six inch distance from the RF reader. In step 1304, the user actuates 
the biometric sensor 102 (e.g., touches the fingerprint sensor with his/her finger or 
thumb) to effect a comparative match with his/her previously registered fingerprint 
securely stored in the memory of the card. A successful match effects an encrypted 
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approval and transfer of cardholder account data to the seller's administrative 
accounts receivables processing system. 

In step 1306, a determination is made as to whether the user desires to 
transfer electronic receipt information to the device 100. If not, the method 1300 
5 continues to step 1310, where the device 100 is removed from the RF field. If it is 
determined in step 1306 that the user does want to transfer electronic receipt 
information to the device 100, the method 1300 continues to step 1308, where the 
device 100 stores the information in memory. The method 1300 may then continue to 
step 1308, where the device 100 is removed from the RF field. 

10 While the preceding description shows and describes one or more 

embodiments, it will be understood by those skilled in the art that various changes in 
form and detail may be made therein without departing from the spirit and scope of 
the present disclosure. For example, the present disclosure may be implemented in 
a variety of form factors, such as a wristwatch or wristwatch band, a key ring, or a 

15 variety of other physical structures. Therefore, the claims should be interpreted in a 
broad manner, consistent with the present disclosure. 
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WHAT IS CLAIMED IS: 

1. An apparatus for effecting secure transactions in a contactless manner, 
the apparatus comprising-" 

a biometric sensor operable to detect biometric information associated with a 
5 user of the apparatus; 

a processor accessible to the biometric sensor, wherein the processor is 
operable to process the biometric information to verify that the user is authorized to 
use the apparatus; and 

at least one communications component accessible to the processor for 
10 providing contactless communication with an external device, wherein the 
communication requires verification that the user is authorized. 

2. The apparatus of claim 1 wherein the communications component is 
operable to receive power in a contactless manner, wherein the received power is for 

15 powering at least a portion of the apparatus. 

3. The apparatus of claim 2 further comprising a power circuit accessible 
to the communications component and the processor, wherein the power circuit 
includes- 

20 a battery management unit for managing a battery; 

a converter operable to convert power received by the communications 
component into power usable by the apparatus; and 

a power multiplexer operable to determine whether to draw power from the 
battery management unit, from the converter, or from both. 

25 

4. The apparatus of claim 1 wherein the communications component 
includes an antenna operable to receive and transmit radio frequency signals. 

5. The apparatus of claim 4 wherein the antenna is operable to receive 
30 power in a contactless manner, wherein the received power is for powering at least a 

portion of the apparatus. 
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6. The apparatus of claim 1 further comprising a memory accessible to the 
processor, wherein a biometric analog of the user is stored in the memory and used by 
the processor in verifying that the user is authorized to use the apparatus. 

5 7. The apparatus of claim 6 further comprising a plurality of instructions 

for processing by the processor, the instructions for" 

comparing the detected biometric information to the stored biometric analog 
device; and 

verifying that the user is authorized to use the apparatus if the detected 
10 biometric information matches the stored biometric analog. 

8. A device for validating a user's identification in a contactless manner, 
the device comprising' 

a biometric sensor for sensing biometric information of the user; 
15 a memory for storing a biometric analog associated with the user; 

a processor accessible to the biometric sensor and memory, wherein the 
processor is operable to compare the sensed biometric information to the stored 
biometric analog to verify the identity of the user; and 

a component accessible to the processor for providing at least one of a 
20 contactless communication route for the processor or a supply of power to the device. 

9. The device of claim 8 wherein the biometric information is a fingerprint 
and wherein the biometric sensor comprises a matrix of points operable to 
detect high and low points corresponding to ridges and valleys of the 

25 fingerprint. 

10. The device of claim 9 wherein the biometric sensor includes an emitter 
and a detector, wherein light projected by the emitter is reflected from the user's 
finger onto the detector. 



30 



11. The device of claim 8 further comprising a display for providing 
information to the user. 
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12. The device of claim 11 wherein the biometric sensor, the display, and 
the component share a common layer and are created on a single substrate. 

13. The method of claim 12 wherein the device has a credit card form 

5 factor. 

14. The device of claim 8 further comprising a power circuit, wherein the 
power circuit includes ' 

a battery management unit for managing a battery,* 
10 a converter operable to convert power received by the component into power 

usable by the device; and 

a power multiplexer operable to determine whether to draw power from the 
battery management unit, from the converter, or from both. 

15 15. The device of claim 8 wherein at least a portion of the device can be 

manipulated by the user, wherein the manipulation enables the user to interact with 
the device. 

16. The device of claim 8 further comprising a dynamic magnetic portion, 
20 wherein the processor is operable to selectively alter the magnetic portion. 

17. A method for effecting a transaction using a device capable of 
biometricaDy verifying a user's identity, the method comprising* 

providing power to the device from an external power source in a contactless 
25 manner; 

actuating a biometric sensor on the device to detect biometric information 
associated with the user; 

comparing the detected biometric information to biometric information stored 
in the device; and 

30 validating the user's identification if the detected biometric information 

matches the stored biometric information. 

18. The method of claim 17 further comprising continuing the transaction 
only if the detected biometric information matches the stored biometric information. 

19 
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19. The method of claim 17 further comprising converting the power 
received from the external power source into power compatible with the device. 

20. The method of claim 17 further comprising- 

prompting the user to approve or deny the transaction using the device; and 
approving or denying the transaction based on the user's response. 
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